Log in Start free

Vulnerability · Published Mar 12, 2024 · Assigned by siemens

CVE-2024-22045

High 7.6

In plain English

A high-severity security flaw in SINEMA Remote Connect Client from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).

Severity (CVSS 3.1)7.6High
Exploit odds (30 days)0.4%top 62.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. This information is also available via the web interface of the product.

Affected products (as reported)

VendorProductVersions
Siemens SINEMA Remote Connect Client 0 – before V3.1 SP1

Weakness: CWE-538 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:O/RC:C

References